Searching PAJ 



1/2 > 



PATENT ABSTRACTS OF JAPAN 



(ll)Publication number : 2000-216766 
(43)Date of publication of application : 04.08.2000 



(51)Int.Cl. 



H04L 9/08 

G09C 1/00 

H04B 7/26 

H04Q 7/38 



(21) Application number : 11-012227 

(22) Date of filing: 20.01.1999 



(71) Applicant : KODO IDO TSUSHIN SECURITY G1JUTSU 

KENKYUSHO:KK 

(72) lnventor : ANZAI JUN 

MATSUZAKI NATSUME 
MATSUMOTO TSUTOMU 



(54) EXCLUSIVE KEY SHARING METHOD 

(57)Abstract: fj] 
PROBLEM TO BE SOLVED: To accelerate updating of confidential p, 
communication by allowing each terminal, capable of being specified by a lj> 
base station, to hold a secret key and the secret information of a self- 1 
terminal calculated from the number of terminals and to find new secret 
information according to received information, when the base station 
conducts broadcast communication. 

SOLUTION: Each terminal, (i) capable of being specified by a base 
station, holds a secret key S and a secret information Si satisfying a 
relational expression defined by a number N of terminals, and the base 
station holds information including an element (g) of a specified term 
calculated by the relational expression and secret information SI to SN. 
The base station calculates preparation information CI from the 

relational expression, calculates elimination information C2 from the f 
secret information Sa of a specific terminal (a), performs broadcast & t 
communication of both the number (a) of the terminal (a) and the \J/ 
information CI to all terminals, finds a shared key K with all of the 
terminals (i) except the terminal (a), and each terminal (j) finds the key K 
with the base station by using the information CI and C2 and own 
confidential communication Sj. The base station conducts broadcast 
communication to all of the terminals, finds a new element (g'), replaces it with an element (g), and each 
terminal (i) finds new confidential communication Si'. 
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C ! t flWPMMBC 2 fc g#o«!^ff $ SjlrfflviT. 
ME S j 1 11] IE A ( j , A ) CO HU IE& q ±"Ctf>« £ Jgft fc i" 

<V<SjXA(j,A) modq) modp 

fc. frKffiq±-C*ftJtlREA(a.A)tfla»i:t-*, 

C 2 *(A(a,A) modq) modp 
fc<9?S 

C 1 -(S j XA(j.A) modq)XC 2 "(A(a,A) modq) 
modp 

ft. ( i ) ftrfB^MUli. *?&HGF(q)<07Ce£fl5 

»c£jK L, Iffffie ££4B*£|3|«iHi U ( i i ) ftffi 

g' = gl/e modi 

Si' = SiX e modq 

{Z<7>b%. (g') si ' »odp = (g)si nodp*s^*)4 

[002 1] *^«|»*^2Em^BJ(i, ffistfg 
K3*ifcN£ (Ntt2H±«a«) 0tt£*6&tH* 

fcii*R*)^&*£pfcU (p-l)<0«»tqi:L, 
G F ( P ) <0tc£ g fc U fftftSS* ( SOffi**^ 5 £ 
) 4«NfS&rS 1 fc U rm& 

S = 2A(i,A)xSi (MH EA(C-3UTff5) 
(fc*£U 

S^S+fjXi modq ( f ^iSg-CSr^GFtqXT) 
7E> . 

A(i.A>=n<L/(L-i>)flWiLeA-{i»lC-3 

^r^mmizx o«a$^miE*S5tP , fris^icq , 

y = g s modp 



yi = g S! modp,y 2 = gS2 modp ,— , y„= gSN modp 
SrfflfflT# , ( 1 ) miBI»fiS*!i. t^HGF(q) 

Cj = g k modp 

SrttW L , ( 2 ) f j1EfiA*ii*li , #5giffi* a W&RJft 
C 2 = y a k modp 

t^SBiftu ( 3 ) wmmmt. mm 

K = y k modp 

£*ft. (4) fulB#ffi*j (j *a)tt, A = {j ,a} 
blX. A(J.A)tA(a.A)**ft. (friB^ffiftffgC 
1 fc B5fBJ»ff* C 2 fc g#tf0^ff fg s d fcfflv vc . 
Cr(SjXA(j,A) modq)XCr(A(a.A) modq) 
modp 

*W**-*-*£fcfcJ:9, BufBlMlffi*fc<D^giK£ 
*ft. ( i ) !9IE^TA«a*a. mUGF(q) 
W7CeSrffiSt4jfiL, fluIBe£^*^l5l«fiL-, 
(ii) UfE^rAfifa*!^ frS^ 

g' = gl/e nods modp 

£*ft. «a-rftWE7Egk«jii. (iii) mib# 
jean, ifawttt 

Si' = SiXe modq 

(^«0t#, (g') si 'aodp=(g)si modp#j£9£^>) 
S:SftSSfff!!Wli**ffit-^0, yXfAflfCJ:!, 

^>«sMi* 3c^Bacsiw-& fc ^ a &mim . 

[0022] *l&BJf)M*JB3|B»«^(±, 3^ 

, friBSiw t &m $ n & ( n 14 2 tub^aaa ) 
mmmz&^x. wsmzsti. smsisxtmm 

NiO**v^3KR4fcja«o^*l[tpfcL N (p- 

1 q fc U Sfl*«^T'§ ( 

t. m&mt^o ) £ 1 fc u mriB#s* ids 

iSN)(±, 

S=2; A(i,A)XSi (Wtti eAICOV^Tffd) 

S^S+fjXi modq ( f i(£f-C&V>GF(q)<7) 
7C) . 

A(i A)=TT {L/(L- i)}(«(iLeA-{iUco 

^fct«»fli«s i &fi{gftffij#LT*5>5, lute 
mmmt. fluid (s,p,g,s,,-,s,) 
( 1 ) mmtma. GF( P )<?)7n£gfcL. 

GF(q)C07C^kfcL^fc#. Jflffifflfffi 
Ci = g k modp 

Srft»L. ( 2 ) ffi££f«J3tt. ^ma^Mi 
C 2 = g~(kXS a modq) modp 
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iz rmmm u o) mim&mz , friers* a £ 

K = g A (kXS modq) modp 

( 4 ) BUfE»fU ( j * a )Ji, iulE^CIffl* 

Cj t fuiE»tf?Bc 2 1 s&mwmsiiM^x. 
Rule s j t mfie a ( j , a > <n mm q ±x <r>n * t -t 

Ci A (SjXA(j,A) modq) modp 

fc« ffllEffiq±-C*«>fc«S!A(a,A>&Ji«t-r4. 

C 2 ~(A(a,A) modq) modp 

C 1 A (S j XA(j , A) nodq)xC 2 "(A(a,A) modq) 
modp 

*>. ( i ) BUfEKitPoti. *T*V^GF(q)057Ce £f£ 

st^aic l , me«#S£k im^xsm it ttimfce 
zzsmzmmmm i , ( i i ) tutEM^. 

g' = gl/e »odq modp 

flJIBTCg (ill) ffi3E*JS*j 

Sj" = SjX e modq 

(<IOi:#, (g')"' modp = (g)sj mod p 9 ± 

[0023] *mie>tn%m43&&c?mm±. mmz& 

fcM*ft*5*S*fcpl:U (p- 1 qfcU 
GF(p)07E&gtL. fftRsS* (£StoS8*065:SC: 
S4) :WSrcS£ft5g*8*»£ 1 1 U f/iE& 
Jg*i (lSiSN)li. 

S = 2: A(i,A)xSi (fttii EAfcOlrVCffd) 

S i = S+f 1 Xi modq ( f ,lift'4^GF(q)« 
7U) . 

A(i,A)=IHL/(L-i)}flB±L6A-M}t:o 

ail tiriaN^cos*^tt^2^*^^§m^t'^ 

y = g s modp 
t . &§Bfilffi 

yi = g si modp,y 2 --gS2 mo dp y N = g SN modp 
fcffUBVS . ( 1 ) fflE»Mlctt. mv^GF(q) 



C! = g k modp 

Ht*U ( 2 ) filE^S*{i. 8r£tS*a«9&6Bffl 
C 2 = y a k modp 

fcUfffilflU ( 3 ) BtitEfiftffi*{i. 

K = y k modp 

(4) mie#«*j (j *a)tt, A={j ,a) 
tlX. A(j , A)t A(a,A)2r^is6. MEWl-fflgC 

<V(S d X A(j ,A) modq)xC 2 "(A(a,A) modq) 
modp 

£ttff £ fc t i "5 , MfEfl£Sfcfc^4WttK £ 
( i ) mm&^M±. *t'^^GF(q)OTCe 

s±a*t;^*ani u ( i i ) mimmmi. m 

Sbc 

g' = gl/e «odq modp 

fTETCgfcg^SU, (iii) frlE#«*j 
i±. fllE^fte^mlE4**fflK^fflv^fa^tL, « 

S;i' = SjXe modq 

(<I<0iK (g')Sj'modp=(g)sj modp^fijcOir 

[0024] *sMBwi»*s 5 eaaftgm , fflstss 

«$<xfcN^ (N«2Ja±««R) Offi**^^S|B]|8 

^as- s L . HE S H J: X/mtlN X D * § v ^St* 
fcliit«\^MptL. (p-l)«5qtL, 
GF( P )W7cSrgtL. iWMSfcbj&aBjrc&Sftsgi! 
*iicSr 1 fc L. t?IE#ffi* i ( 1 S 1 S N)(i, 
S=2A(i,A)xSi («J±i eAfcroivcfro) 

Si = S+f!Xi modq ( f ,{i$t?5rHGF(q)CD 
7C) . 

A(i ,A) = TT {L/(L-i))(»(iLeA-{i)tO 

§ ) « Si &mzm ixa o . wse 

y = g s modp 

Yi = S sl modp,y 2 = gS2 modp y N = gSN ^p 
5rfWT-S . ( 1 ) flriEagiftfcbti, ft^«F 
( q ) <nit k $r ffigt^JsS L . 4MBfm 
C! = g k modp 

< 2 ) fnHMK38*bii. m&&i*oxm 
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C 2 = y a k modp 

fcffi*ilffiU ( 3 ) HulE»*S*b(±. mm 
K = y k modp 

(4) BUffi#ffi*j (j*a.b)tt, A={j, 
a}tLT, A(j ,A)t A (a, A) MtS^filffi 
«C j t IKBS FBMMIC 2 1 g #o«saFffif8 s d £ JBv > 

C 1 A (S j XA(j ,A) modq)XC 2 "(A(a,A) modq) 
modp 

[0025] *?6BJcOii5l<Ji6ia^(7)f60J(i:. Kf*55 
Yb = g Sb modp 

WHttWc^ttHHIHlc,^, T4zS?/WI&im 

[0026] *w9&msiii7Bm0ffliit* mm 

im%m.l)\ IMBtf&R* aiZttLX. ±IS7Ue^ld 

sau ±iE#^ffi*a(±, «rmniHii 

S a ' = S a X e modq 

(g') "S a " mod P = (g) "S a nodp*s 
J*"5fto) £j£K>4t>co-C*»h =B£sa*afc:e£EjS 

[0027] *»BBwM*iS8iB«so^Hji{i. m^m i 

[oo2s] bit, *wn<r>mmcommiz^x , m i 
~~m 1 3 &#saL=5f*«i9»WK»w-i . 
[0029] (m vmtmmm > i ^njs 

oWBJBMi, »6«t«8ft<?3SS**»^5:-6|SIffl5i<iA*BriE 
^jifi^Xx-AtiJOT. |f^>GF(q) 
c07Ee$:ffiS{;4;jSLT^S*(C|il|gjifIL, fffflx 

g'(= g i/< .od, modp)^a6T. Ttstm^mt. 

i *\ fffflfl^ffffiSi' (= Si X e modq) 
[00 30J H 1(2, *mimm 1 «*Sfic0««#fft!l 



g i com&mmmmmmmizmiTtg^® 

[003 1 ] 01H23£#BgLT, #IKRcogsio>£ 

■t x o iz . in 7 f i , s£fls££L"c, lea? eft 

IHHtSJ:»)*&<, ffi*^6J;^^^5r^ 
4fctt*»<VCSp£fl*LT, (p-I)o 
IMSqtloSfttfiUWS. GF(q)coor^^7cf 

[0032] f(z) = S+f,Xz modq 

tffl^T . Sj = f ( i ) fcu-w-rs i t iz x 

SffflffiSi i(lSi S 6)tCBf-tjifi^^ 

[0033] 6£«9ffl*«)ffi6tt>2&*»ibfc6*££A 
fcLfcfcfc. SfaffiHRSitt. 
S=2:A(i,A)xSi (ffi(ii EAfcmvCffS) 
A(i,A) = TT{L/(L-i)} (»tiLeA-{i}(C 
-^vCff-j ) 

imtZt. fc**U *^A-{i}(i. *£A*»6*£ 
I i I fcfcitf. A= { 1 , 2 > t 

A(1,A)= TI {L/(L-1)| (Lg{2>) 
= 2/ (2-1 ) =2 

A(2,A)= TT {L/(L-2)> (Le(l|) 

=1/(1-2) =-1 

22 A( i ,A)x Si(i 6A) 

= A(1,A)XS, + A(2,A)XS ! 

= 2xf (l)-f (2) 

= 2 ■ (S+f ,)-(S + 2 • f i) 

= S 

[00 34] #js*i,....6{i, warns iium 

i(=g si modp), y 2 (=g S2 modp),"-,y 6 (= g S6 mo 

t-&^S8*«0&BH»y(=gs ■odp)Srtt»LTIE1tas 

[003 5] «*5 »tmrt 4*&S»"!W-4 . ^Jt^ 
711. GF(q)iO0T^^7Ck^ffSt4^L. 
fti:L. P^tL, g^Et-f-.SWftfgC^-gk 
modp)$-H-«f^>. HfckfcffilL p^L, Stfi^ 
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C 2 ( = y 6 K modp) SHOT*. kffl,P^ 
£«S*1, ■■■,6<0&iMly&l£fc'tSft*aiK (=y k 
modp = g~(SXk) B odp) JiLhCOC!, C, 

[0 0 3 6] «*5t»V«;^T«S|*l,-,4,6T 

5*>£>, A= { 1 , 5} blX. 

A(1,A)=5/ (5-1) =5/4 

<V(S,XA(1 ,A) modq)xC 2 ' 
= g'(kx SjX A(l ,A) modq) 
Xg A (kXS s XA(5,A) modq) 
= g"(kX(S l XA(l,A)+S 5 X 
= g"(kx S modq) modp 



A(5,A)=l/(l-5) =-1/4 

*|f*f£. *{itf«C 1 (=gH ^dpjfc, »fif$gC 

2 (=y 5 k modp)2-^V^T, Sjh A(l ,A)£*§»fc 

C/(A(1 ,A) modq) modp 

C 2 ~(A(5,A) modq) modp 

t<m 

(A ( 5, A) modq) modp 
modp 

A ( 5 , A) modq)) modp 



[0037] J3LhOH-»i. SS8*2~4 , 6TtBWt 

[00 38] -Jr, «B*5(CtJWCii. &ttft7d>&fl 
«Mft$^^tt$gC 2 (=y 5 k =g-(kXS 5 ) mod 

( = C,S6 mod P = g~(kxS 6 ) nodp)**. HfCfc* 
A= {5} fc4r>'CA(5,A)36«Uifefe*l«rV^ 

[0039] 

K = g A (SXk) modp, 
Cj = g k modp , 
y = g s modp 

[0040] @2S:#SSl/C, »6E7#jGg£ie*ft 

sjssaiws. »s^7(i, ^rc4v^GF(q)c57c 

4. »*IS«7tt, frSTc 

g' = gl/e modq uodp 

7EgiM£$;c-l>. 
[ 0 0 4 1 ] H3 2r#B3LT . S*^KWH&Sfrtl. 

S 1 ' = S i Xe modq 

(g') si ' modp = (g)si modp 

[0042] .hlEOJ: a fc. *^HJ!£0^ 1 coHJfcWJBSR 

x-iz. nmmm^^mi. mmmtK m^GF( q ) 

i/..od 4 modp^^T. TEgfcg^gU. 



x\ 'Jrt\wm&kWM?mm*wfiv$&. 

[0043] ( m 2 <0^tfcW3BJB ) 2 cO»fe 

. mmzmm § 6 g wjs*** ^ & 4 

tttWF (q)^7Ce £ffiiK±j&U e ££J£3fc(;i 
PlfgilflL, frSTtg 1 /* modp s fa-fl. 

dq ^mmmmmmx'hi. 

1 0 0 4 4 ] 04 a, 2 ommmmm® 

l^T, ^XTA*fJi^9{i, affj/XrAtcr^-feXnr 

ffi-f s . a 5 ^i&mm 2 nrnformmommm 

a . *fMS«oss 2 mmpm&nm iwrnsGmza ft 
zm^mmmz^i-mxh s . 

[0045] H4~H6fc»Hl,T. *f£i»l!«03S 2 <0£ 

mmmnmmm&wz^xmmth . 04 

^S»£pfcU (p-l)tf>»ft£qiU GF(p)<7) 

teSt g k L . lifts* (ffi*WJiS**ftSrS £ k * { T"£ 

s ) iffifex-z tmsmmz it+z. 

[004 63 *SS*i (UiS6)(±, 

s=sA(i,A)xSi (ma ^Mz^xfto) 

S^S+fjXi modq ( f ,liftt^GF(q)« 
7C) . 

A(i ,A) = TI IL/(L-i))(ffl(jLEA-{i)(;^ 
V^Tffd), 
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y = g s modp 

yi=g sl modp,y 2 = gS2 modp y 6 = g se modp 

C, = g k modp 
C 2 =y a k modp 

K = y k modp 

10048] #JB*j(j*a){i, A={j,a(i:L 
T. A(j,A)fcA(a,A)£:*«>. iftf fflffid £ gftfe 

C!*(SjXA(j , A) modq)XC 2 ~(A(a,A) modq) 
modp 

[0 0 4 9] 05S:#SLT, 7Cg05JE*f*ffi*ttf»r 
Sit) Sffi»t4«t. eSr^3S8*{=Mffi31®t*. 

g' = gl/e modq 

[ o o 5 o ] 06 twHi/c, ieaM^)jew*ffi*ittHH 

Si — S| X e modq 

£**>T#JH-£. ZCOtZ, (g')si , mod P =(g)si „ 

odpi^Oit'?. 

[oo5i] ±iE«o i a fc, 2 ommcoBB 
xn. wwtmg&mi. yxfA^a^. area** 

GF(q)<W£efcffltte£jftU e ££3fj*fc|3]$gjlfl 
U S?fffi7cgi/« modp£3<*\ IfJI-t&TCg fcffi 
, i *\ £fTO3?ffi$8 S i X e mod q 

[0052] ( ft 3 comm^mm > 3 coms 

modp^^J6. TCgfcBSflU. Bf^ 
fce£##«K£fflVvtffi-^ffcU fMSftiffgSjX 
e »d q #fffiWH«*ST-* S . 

[ 0 0 5 3 ] H7ii, ^m^m3^mmcomm^mm 



[0 0 54] H7-H9t«HLT, *«W^«S3<^ 

mnmmom immmmz^x ^xmwt s . 1a 7 

"fiat, S«7t, »ft^7tSSKS*i/;6^«0tt 
^SSrpfcU (p-l)<Ofc»£qfcU 

sg-esssas (jaiT, tt£SB*»f:^3 ) £ 1 t-r 

s. 

[0055]«*i(lgiS6)ll 
S=22 A(i,A)XSi (ftiii EAtO^Ttfo) 

Si=S+f!Xi modq (f!l;WPSrV>GF(q)03 
7C) . 

A(i,A)=TT <L/(L-i»flW±LeA-<iHCO 

All, 66OiB*^ffiSc02dj6»fe*6jfe^t**) 2: 
3t>t?fB««* S i SrJHJft «s LT (, ^ . 
[0056] agflS^li. (S.p.s.Sl-.S,) 

Ci = g k modp 

C 2 = g"(kxS 3 modq) aodp 

K=g"(k x S modq) modp 

[0 0 5 7] <j*3)tt, WMINlCifcim 

IWlC^ej^iMIHIHlSjtffl^T, SjkA(j.A) 

cofeq±T'io»sr^fc-rs, c.coK^mi^m 

Ci"(SjXA(j .A) modq) modp 

ffiq±-C**)tA(3.A)S:f^ftt-rs, C 2 C0^§ 

C 2 -(A(3.A) modq) modp 

tern 

Ci*(SjXA(J.A) modq)XC, A (A(3,A) modq) 
modp 

[00 58] H8*#!HLT, ajfte^S^^g^sm 
"TSo M«7(±. *T^^GF(q)£7)7ce (Sjft) & 

g' = gl/s nodq moc Jp 

5:^. TCgtS^Mi.^. 

[ 0 0 5 9 ] H9 £#MIT. «a»Has«*ffi£|(iBBi- 
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Sj ' = Sj X e modq 
modp7^j£9&-3 s 

c o o 6 o ] ±ie<7)j: oiz. imm<n%3<r>%wmm 
?<4. wwt\ *^GF{ q ) 

^fceS^SS8*t|^«iiiiL, *fffl7Cgi/« "<« modp 
•Kfe/Hv^-ca-WfcU »HHBafflHBSjXe mod q £ 

[oo6u (m4commmm ) *^bjco^4 w^jg 

L fc«HHk e S^JSfcfet [Rlfgafl L . Mte g 1 ' • 
"«« K)dpfr*ft N 7CgfcB£$;i, #*H*J#. bh- 
ftei**«KtffiViTa^fcL. SJrSfBaffllffiSjX 

[ o o 6 2 ] 0 1 0*4. ^mn^mA^mm^mmm 

ftWHWffffit^'tBlT**. HI 1(4, *SHHe>»4 

<o^o^<ooae2fc^*jj^Brr*4. 01 2 

[ 0 0 6 3 ] 0 1 0-0 1 2 MHHl/C s *«B^»4 

«^^^^«i«««rstoi^Rw-*. 01 
H«a«*«!nfi*amy^'r^t*5v^T . s t 

fcU (p-l)««t£qJ:U GF( P )^7L^gt 

[0064]«*i(lSiS6)(4. 
S = ZA(i,A)xSi (»(4i eAtOl>Tff3 ) 

S^S+fjXi modq ( f 1 i4^X'^^GF(q)c7) 
7C) . 

A(i,A)=TT{L/(L-I)}(»ttLeA-{i)tO 

Ai4. 6SOJl*«ffiSw2^*>^S*^r*&) S 
^•r*tW«« Si *IB«Kfia* LT i ^ & . ^«t*W& 
Pitt 

y = g s modp 

y! = g sl modp,y 2 = gS2 modp ,-, y 6 = gse mo d p 

X'%&. 

C00 6 5] MMSmi. *T'=2r^GF(q)«7nk&ffi 



Ci = g k modp 
C 2 = y 3 h modp 

£ff* L . 1$5|S8*#^ 3 i: «f$gC , t 
K = y k modp 

[0066] (j *3>tt, A=ij,3)tl 

■C. A(j,A)!;A(3,A)Jfft, MttfBC^&k 

C l *(S j XA(J ,A) modq)xCr(A(3,A) modq) 

So 

[ 0 0 6 7 ] 0 1 1 fc«Hl/c - SLM^gt^l^ 
■fS. !WIS!*(4. *T'^r^GF(q)£^7ce (SUc) £ 

^■*tH«afiw*. a^«*i4. sfffiTt 

g' = gl/e »od<l mod p 

[ 0 0 6 8 J 0 1 2 £#SH LT . SttttNttrtft&KH 
U §r£iBttflm 

Sj' = SjXe modq 

**»TfiM*^-*. £0)4:$^ (g')"'iiKxip = (g)si 

[0069] jjeo 4 3 ic % *%bj^^4 nmmmm 

odp£#K> % TCgtg^^x. #J8*j^ Bf^fbe 
**«K&ffl^Ta^fl:L, frfflitWfllSSjXe mod 

[ 0 0 7 0 ] wnssm^ti^^tm^htdh 
nai^r sf^jitts. ;t^<, «»L^s*^ia 
[0071] mmttz\±mm^K ^im^zn 

LT. Tce^rlBML. ^4j§*3(4. fflgffi&m 
S 3 ' = S 3 X e modq 

(^COt^. (g') A S 3 ' nodp= (g) 'S 3 jnodp*i 

zmz, zco±oizix.w®mbm®cD<<Tm 
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coo72] (us <rm*ntm > *%wcom 5 nmm 

^GF(q)<7)7Ck£ffiff.K£j£U mffitffgC^tm 

[ o o 7 3 ] a i 3i2. ^mcom5^mmmmm 

ffiSfcSSB&flfc 6 (sJMfi*^^ 

9**V^4fctt»*>*SjR*pfcU (p-1)£7) 
*?*SqtL, GF( P )07cSgi:L, HftS*2## 
JET* Ik**. 
[0074]#Sfg*i(lSiS6){±. 
S = 2A(i,A)XSi (fttti eA£-PWCfr3) 

S^S+fjXi modq ( f ^iST&UGFCq)*) 
7t) . 

A(i,A)=IT (L/(L-i»(itiLeA-{iK:o 

y = g s modp 
t . ftBMHI 

yi=g sl modp,y 2 = gSz modp y 6 = gS6 moc ip 

[00 7 5]»jyB*2ii, ^rc«r^GF(q)«07ckS 
ffiiic«U WHIM 

Cj = g k modp 
C 2 = y a k modp 

K = y k modp 

[0076] <j*a,b>|±, A={j,a!tL 

A(j,A)tA(a,A)^ft. ^HtffgC^^ 
fifgC 2 k i#^(fflfW« Sj fcfflV >T . 
Cr(SjXA(j,A) modq)XC 2 "(A(a,A) modq) 
modp 

[ 0 0 7 7 ] a&tt££Nt<£TOtti**<. Hfi 



y b = g Sb modp 

ms h zm^x. ^Mzmmmzmm^sLkm 

i t fc i 0 . #«* j *gsi*c^RHS« y „ 

[0078] jjeo j 3 . 5 commmm 

(q)OTckSrffS(ii(£L. JWBflHBCjSft^L. # 
SS*aco^fflfgy a3 6^SH^tf|gc 2 ^|tJ[t. 

**«k£**>. zmmtmmncikmmcib 
mcowmmmsjzm^x. mmK^mmmt 
tticox\ mmm muLxftzmzmn:* t, . 

[ 0 0 7 9 ] fcfc. a^4fcli&gi8*#. #©a* 
18 

S a ' = S s Xe modq 

(£0>fc*. (g') -s.' modp= (g) "S, modp*i 

4. 

[0 080] ifc, ffiBo^RbaflfR 
ft^i:^ft^.hcoinst?IS[t^f5§^|,; tx\ A3 

[0081] 

mt. mmtmrnztxtzNn (Nii2Uib<D» <n 
& a nrnmrnt^m^mm^ x t a <7)#ew$i 

ttzimmcoKzmzpkL, (p- i qi: 

5)ilkL, =S-ffi*i (1 S i ^N)ii, 
S=ZA(i,A)xSi (mil eAtoOTffd) 

S i = S+f 1 Xi modq ( f 1 {±«T"=5:V^GF(q)« 
7C) . 

A(i ,A)=TT {L/(L- i)M«lL6A-|i|tO 
Aii. N&Offi3fe7)ffigc02£^&|,^T'&S) * 

(s.p.g Sl-.s,,) itmi. (DiHii. 

GF(p)tfD7cS:gt *T'^rV>GF(q)tfD7Ci&ki:U 
Ci = g k modp 

& ttff t . ( 2 ) at mmtt , ^ss* a ^e^ffiiR s a 

C 2 =g~(kXS a modq) modp 

tWBilfiL. ( 3 ) glftRtt. ^5t^a^^<^T 
(j *a)i;^itwa 
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K = g A (kxS modq) nodp 

(4)#sfg*j(j^ a )ti N mm/mettle 

C^(S d XA(j ,A) modq) modp 

C 2 ~(A(a,A) modq) modp 
k<9« 

Ci A (S d XA( j .A) modq) X C 2 ~( A ( a , A) modq) 
modp 

l . e z&mizmma u ( i i > mmu. mm 

g'=gl/e modq 

mm 

Si'^SiXe modq 

(CltfOi:^, (g') si ' modp = (g)Si «odp 

[00 82] ttSIClHISflfcN^ (NJ±2ja± 

com.) m^fr^mmm^mvmm^x^ 
nmmmmumza^x, < i > 

*^^GF(q)tf57Ce£ff*K£j£U e»^C 
HWI4BU (ii) ^XxAffl#}i. frfflTC 

g' = gl/e modq nodp 

tfS-rSTCgfcS&illx., (iii)#«*i 
14, *r«»»fll« 

S^^ ' = S^X e modq 

[0 0 83] ifc, Stffi^i:. »fi^fcS8K3*l*:NS 
( N |± 2 GLbOSafc ) & § |H]|gMfI* ! °Tfjg& 

iifi^xTA«»«^ttw«tcfc^T. ( i ) mm 

ii. *rCfcV>GF(q)«7Ce£ff«fc£j£U ***K 
(ii) SJfgfttt. frffiTC 

g' = g1/e modq modp 

7Cgfca&»*. (iii) Bg#-ffc 
Sj' = S 0 Xe modq 

l t . mmmmgarctm i rz^m^mmx % % 



[oo84] &^ mmzmmztitzNti (N»±2ja± 

^»flfiW«ft*atfe^T. ( i ) ttg&tti. *r?5r 
V>GF(q)^7neS:t£S{i4ijSL. =&ff«K £fflf>TBf 

g' = gl/e modq m0( 3p 

e**3r*K£JBVvtarefcU 3i£i8&ffifB 
Sj ' = Sj X e modq 

£:fctf>£fllJSk Ltz<nx\ mmm^x'^Ltz^ 

mm^xm%Ltz&ik£m^xM*<v%mtfimzw.® 
ix . i^oiiMm«ttr?ffi* Lfc*te&«twiT* =sr 

[008 5] ifc, *2fcJHRFilfcN£ (Nii2iilt 

N«tO*&V^Saft*Jt{i«Ro^&ftSptL. (p- 
l«MqtL. GF(p)C07U£gtU Milffi* 

bwjsvs *#©»5Krs- lit. zm nisi 

S=2:A(i,A)xSi (ftlii 6Al;^^ix5) 

S i = S+f 1 Xi modq ( f ,l±!rc$:HGF(q)<D 
7C) . 

A(i.A) = rHL/(L-i»(flHiLeA-U}tO 
lATfrSh 

wtfiHWHBSi mmzimtxa o , uwis^b 

y = g s modp 
k. &BHt« 

yi = g sl modp , y 2 = g" modp y H = gSN modp 
SrflJffl-C^ ( 1 ) f«ftJi»bli s fT^>GF(q)« 

C! = g k modp 

£ H* U ( 2 ) a«JS*b ^Sffi* a 
G 2 = y a k modp 

m%L. m&^^atmmmc.tmz^m 

tiai«BHIL, ( 3 ) sy%ffi*b{i. 

K = y k modp 

(4) (j *a,b)|±. A = {j,a}fc 

LT, A(j ,A)fc A<a,A)*««>, flMMMIlCiiJI 

C 1 "(S j X A(j .A) modq)XC 2 '(A(a,A) modq) 
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sumt>tu>. 

[01 ] *f6^mi«iat«»Bttcoj|«**SK:tJJt 
[04 ] **HB«*2<o|Qt^Jg«coj|ft^r*r&t:tilt 

[05] m2(mn<mm<DmRWjmz}ivz>7ig<n 

[07] *wMnm 3 ^mmmmcom&Wimiz *> tt 
msim^mmmn^m&ttmz&v&nmi 



:m9i m3commm<nmmmizmz>mi<7) 

[0io] *mmm4mnmm?)m-fiijmizt3 

[0ii] H4^te«^ffi^*#^tfc(ti>ait 

[012] mmmmmmmimtz&vzmi 

[01 3] ^wncvmsnmm&Bcommiimtzii 
if ?>m^iu^com&jm^-t mx-ht . 
[w^i^bj] 

1 ~ 6 JStI; 1 6 
7 

8 HftffiEHH 

9 yXfAflf 

10 iWSj* 
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